metasploit | dbe7cdd62aaf7dcb315b4c0267a6c7add37b1c16d41f13f769193195fb7fb2e7 | Triage

Sharing

General

Target

JaffaCakes118_dbe7cdd62aaf7dcb315b4c0267a6c7add37b1c16d41f13f769193195fb7fb2e7
Size

3KB
Sample

241224-wtppzatnbn
MD5

e1bf08b3204acab486edf389bf7b5fb3
SHA1

3eaebe8ef14eed87fddb83a54fb446dd996c0eff
SHA256

dbe7cdd62aaf7dcb315b4c0267a6c7add37b1c16d41f13f769193195fb7fb2e7
SHA512

a8bd401dca39d5ec2a6215c538e23226bc7c2dc814a9859a1ac48825dc342d33c20edc1c61ac580b42b28b5bbd13fc795446e6f0e346677b31fe8e350aa2dff6

Score

10^/10

metasploit backdoor discovery trojan

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

104.244.78.10:443

Targets

- Target
  
  calc.bin
- Size
  
  4KB
- MD5
  
  c09e58489e3bef464ee7d53c0d609f78
- SHA1
  
  41ede30973d6923c5bc786f1296d9b75fceb6f0c
- SHA256
  
  25801b86c6d2f41ea26db2b6508568ac95e0c568cd7f54af74676181e2564a30
- SHA512
  
  e9fd39300a860979db084e57cb9dfde5fe591e4e3f23e08dad4dd8312752811a5421b3a7a5583cb346e46b49b56432639fa81a7cdb4a82da83fbb3a9f6baadf6
- SSDEEP
  
  48:6YiVVIUd9C+DYXxHrJBA/EVU7FqsGN6hzwDD26FMx3Zwjj0xs1YPGdBb:VKuU2Hx9QEViF5PRH3e30WSMZ
Score

10^/10

metasploit backdoor trojan discovery
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
- Metasploit family
  metasploit
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metasploitbackdoortrojan

behavioral2

metasploitbackdoordiscoverytrojan